Critical severity · published Apr 11, 2025
CVE-2025-0129
Prisma Access Browser: Inappropriate control behavior in Prisma Access Browser
9.3
CVSS
0.2%
EPSS
No
On KEV
Description
An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Prisma Access Browser · Palo Alto Networks
1 before 132.83.3017.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0129
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0129
security.paloaltonetworks.com
https://security.paloaltonetworks.com/PAN-SA-2025-0008
More from Prisma Access Browser
5.1
CVE-2025-4233
Prisma Access Browser: Inappropriate implementation in Cache